fox0001
V2EX  ›  问与答

百毒在扫描什么?

  •  
  •   fox0001 · Sep 7, 2017 · 3269 views
    This topic created in 3350 days ago, the information mentioned may be changed or developed.

    查看 Nginx 的 access.log ,发现 IP ( 180.76.138.179 )在访问一堆不正常的链接。查了 IP 地址,发现是百毒的 IP。很好奇,这是在干嘛?

    Nginx Access Log http://ww4.sinaimg.cn/large/0060lm7Tly1fjaoj7l0d0j30tr0rjgqe.jpg

    ipip.net 查询结果:180.76.138.179 http://ww4.sinaimg.cn/large/0060lm7Tly1fjaojx2wrej30vy0n1768.jpg

    8 replies  •  2017-09-07 09:18:58 +08:00
    yexm0
    yexm0
    Sep 7, 2017 via iPhone
    1
    看来威胁情报哪里写得挺准的
    fox0001
    fox0001
    OP
    Sep 7, 2017
    2
    @yexm0 #1 什么是威胁情报?
    0ZXYDDu796nVCFxq
    0ZXYDDu796nVCFxq
    Sep 7, 2017 via iPhone
    3
    access.log 记录的是 client ip 还是 x-forwarded-for 的 ip
    后者可以伪造
    tghgffdgd
    tghgffdgd
    Sep 7, 2017 via Android
    4
    @fox0001 仔细看你自己的截图,里面写着
    a1044634486
    a1044634486
    Sep 7, 2017
    5
    @fox0001 在哪,我也没看到
    oott123
    oott123
    Sep 7, 2017 via Android
    6
    百度云观测
    fox0001
    fox0001
    OP
    Sep 7, 2017
    7
    @yexm0 #1 @tghgffdgd #4 @oott123 #6 就是不断扫描我的网站,看看有哪些漏洞?
    U7Q5tLAex2FI0o0g
    U7Q5tLAex2FI0o0g
    Sep 7, 2017
    8
    扫漏洞。阿里云也会
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Privacy   ·   Solana   ·   1354 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 39ms · UTC 17:13 · PVG 01:13 · LAX 09:13 · JFK 12:13
    ♥ Do have faith in what you're doing.